sys-apps/systemd: Sync with Gentoo

It's from Gentoo commit fb9c9753a1649cf9c5310fec774b3b38a76b4253.

Signed-off-by: Krzesimir Nowak <[email protected]>

Author: krnowak

sdk_container/src/third_party/portage-stable/sys-apps/systemd/Manifest

@@ -1 +1,2 @@
-DIST systemd-257.7.tar.gz 16327096 BLAKE2B 59a28ce9b355b98f718f26489400640f3d732bbf73c00ea0571302dfc6dfb3585bf07ec56af06d74c5aa033b06a6220c3c839af6dba5ab7f8bde1aef4b58f0f6 SHA512 fdc7c0153432b261ad8018c869dc714ce1d6d2a8428bdec46f7c5f120b196d3a553a375ae433f0c166c57b6e8b3c56549f585349b7b6ff83c2a86a32982d8411
+DIST systemd-257.9.tar.gz 16401765 BLAKE2B c3ad528d37b89de8f82548807e950b59aab43f875a533ad983169eb539594e5e8230b6b562caee5297dcec4572e27df0e53ebee04f79e85f429f47862031592e SHA512 23b3d2764e0f990d8373068ccb41177793413bc193f7bd34e38b03d6fc3cd32d07c86e9dcbf07e32904075bb5eeca208f65beab04d628ac0e0b81ba87a975c1b
+DIST systemd-258.tar.gz 16976853 BLAKE2B c63bc09bff11ba4cf6e87bef689250a6b354bf8f5bfb5af6d2a173fa1e1838aa457a8a7db66f7aad20dae25b7a0defddcb052d53f18a688a2dd6d5f323d4692a SHA512 c488354da1c170ad02e10926f561d1985c3c3393fec878562f295ef764fdf3a1b2877c3b2549253f19bf23e357be6e443a50b937f60f4677f286d3402d611b85

sdk_container/src/third_party/portage-stable/sys-apps/systemd/files/99-default.preset

@@ -0,0 +1,51 @@
+From 7b9ee7375ca9a1521ff36dd9ceb8a26e59572a6e Mon Sep 17 00:00:00 2001
+From: Mike Gilbert <[email protected]>
+Date: Wed, 17 Sep 2025 15:40:57 -0400
+Subject: [PATCH] journald: do not change the kernel audit setting by default
+
+Bug: https://bugs.gentoo.org/736910
+---
+ man/journald.conf.xml         | 2 +-
+ src/journal/journald-config.c | 2 +-
+ src/journal/journald.conf     | 2 +-
+ 3 files changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/man/journald.conf.xml b/man/journald.conf.xml
+index 1a68ba8698..a9a77a51d1 100644
+--- a/man/journald.conf.xml
++++ b/man/journald.conf.xml
+@@ -482,7 +482,7 @@
+         kernel auditing on start-up. If disabled it will turn it off. If unset it will neither enable nor
+         disable it, leaving the previous state unchanged.  This means if another tool turns on auditing even
+         if <command>systemd-journald</command> left it off, it will still collect the generated
+-        messages. Defaults to on in the default journal namespace, and unset otherwise.</para>
++        messages.</para>
+ 
+         <para>Note that this option does not control whether <command>systemd-journald</command> collects
+         generated audit records, it just controls whether it tells the kernel to generate them. If you need
+diff --git a/src/journal/journald-config.c b/src/journal/journald-config.c
+index dd2e29e296..4160fa2ab9 100644
+--- a/src/journal/journald-config.c
++++ b/src/journal/journald-config.c
+@@ -122,7 +122,7 @@ void manager_merge_configs(Manager *m) {
+         MERGE_NON_NEGATIVE(read_kmsg, !m->namespace);
+         /* By default, kernel auditing is enabled by the main namespace instance, and not controlled by
+          * non-default namespace instances. */
+-        MERGE_NON_NEGATIVE(set_audit, m->namespace ? -1 : true);
++        MERGE_NON_NEGATIVE(set_audit, -1);
+         MERGE_NON_ZERO(sync_interval_usec, DEFAULT_SYNC_INTERVAL_USEC);
+ 
+         /* TODO: also merge them when comdline or credentials support to configure them. */
+diff --git a/src/journal/journald.conf b/src/journal/journald.conf
+index 9a12ca7657..e42efbcf84 100644
+--- a/src/journal/journald.conf
++++ b/src/journal/journald.conf
+@@ -47,4 +47,4 @@
+ #MaxLevelSocket=debug
+ #LineMax=48K
+ #ReadKMsg=yes
+-#Audit=yes
++#Audit=
+-- 
+2.51.0
+

sdk_container/src/third_party/portage-stable/sys-apps/systemd/files/gentoo-journald-audit-r2.patch

@@ -0,0 +1,27 @@
+# Sample nss configuration for systemd
+
+# systemd-specific modules
+# See the manual pages fore further information.
+# nss-myhostname - host resolution for the local hostname
+# nss-mymachines - host, user, group resolution for containers
+# nss-resolve - host resolution using resolved
+# nss-systemd - dynamic user/group resolution (DynamicUser in unit files)
+
+passwd:     files mymachines systemd
+shadow:     files
+group:      files mymachines systemd
+gshadow:    files
+
+hosts:      files mymachines resolve [!UNAVAIL=return] dns myhostname
+networks:   files
+
+services:   db files
+protocols:  db files
+rpc:        db files
+ethers:     db files
+netmasks:   files
+netgroup:   files
+bootparams: files
+
+automount:  files
+aliases:    files

sdk_container/src/third_party/portage-stable/sys-apps/systemd/files/nsswitch.conf

@@ -0,0 +1,38 @@
+https://bugs.gentoo.org/963528
+
+From 1403faeb152e24ef74230891cc6bf1875292324f Mon Sep 17 00:00:00 2001
+From: Daan De Meyer <[email protected]>
+Date: Fri, 19 Sep 2025 11:29:36 +0200
+Subject: [PATCH] tree-wide: Fix two curl warnings
+
+---
+ src/import/pull-job.c               | 2 +-
+ src/journal-remote/journal-upload.c | 2 +-
+ 2 files changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/import/pull-job.c b/src/import/pull-job.c
+index a0b0ef54061b9..b457c39ed1800 100644
+--- a/src/import/pull-job.c
++++ b/src/import/pull-job.c
+@@ -759,7 +759,7 @@ int pull_job_begin(PullJob *j) {
+         if (curl_easy_setopt(j->curl, CURLOPT_XFERINFODATA, j) != CURLE_OK)
+                 return -EIO;
+ 
+-        if (curl_easy_setopt(j->curl, CURLOPT_NOPROGRESS, 0) != CURLE_OK)
++        if (curl_easy_setopt(j->curl, CURLOPT_NOPROGRESS, 0L) != CURLE_OK)
+                 return -EIO;
+ 
+         r = curl_glue_add(j->glue, j->curl);
+diff --git a/src/journal-remote/journal-upload.c b/src/journal-remote/journal-upload.c
+index d669d27274f6a..05f0dad038449 100644
+--- a/src/journal-remote/journal-upload.c
++++ b/src/journal-remote/journal-upload.c
+@@ -308,7 +308,7 @@ int start_upload(Uploader *u,
+                 }
+ 
+                 if (STRPTR_IN_SET(arg_trust, "-", "all"))
+-                        easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0,
++                        easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0L,
+                                     LOG_ERR, return -EUCLEAN);
+                 else if (arg_trust || startswith(u->url, "https://"))
+                         easy_setopt(curl, CURLOPT_CAINFO, arg_trust ?: TRUST_FILE,

sdk_container/src/third_party/portage-stable/sys-apps/systemd/files/systemd-258-curl-warnings.patch

@@ -0,0 +1,31 @@
+https://bugs.gentoo.org/963560
+https://github.com/systemd/systemd/pull/39119
+
+From 6cae201ca1b0bf4a136bdf1002b4bc7983f0ceee Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Mantas=20Mikul=C4=97nas?= <[email protected]>
+Date: Thu, 25 Sep 2025 22:52:18 +0300
+Subject: [PATCH] resolve: undo change to return code of next_search_domain()
+ (#39119)
+
+This caused resolved to only consider the 1st search domain of every
+interface and ignore the rest.
+
+Fixes a regression caused by 81ae2237c1792943a1ec712ae2e630bcc592175b (v258).
+Fixes #39118.
+---
+ src/resolve/resolved-dns-query.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/resolve/resolved-dns-query.c b/src/resolve/resolved-dns-query.c
+index 8ad7bff398d85..4e11ad87bf545 100644
+--- a/src/resolve/resolved-dns-query.c
++++ b/src/resolve/resolved-dns-query.c
+@@ -147,7 +147,7 @@ static int dns_query_candidate_next_search_domain(DnsQueryCandidate *c) {
+         dns_search_domain_unref(c->search_domain);
+         c->search_domain = dns_search_domain_ref(next);
+ 
+-        return 0;
++        return 1;
+ }
+ 
+ static int dns_query_candidate_add_transaction(

sdk_container/src/third_party/portage-stable/sys-apps/systemd/files/systemd-258-resolve-undo-change-to-return-code.patch

@@ -0,0 +1,24 @@
+https://bugs.gentoo.org/963481
+https://github.com/systemd/systemd/pull/39149
+
+From 3df39cedda01dec35e49f1ab5632cf9f325e5320 Mon Sep 17 00:00:00 2001
+From: Xarblu <[email protected]>
+Date: Fri, 26 Sep 2025 21:40:50 +0200
+Subject: [PATCH] shared: add missing alloc-util.h include
+
+Needed for _cleanup_free_
+---
+ src/shared/password-quality-util-passwdqc.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/src/shared/password-quality-util-passwdqc.c b/src/shared/password-quality-util-passwdqc.c
+index d74e0fb7f2370..844068a4d64a3 100644
+--- a/src/shared/password-quality-util-passwdqc.c
++++ b/src/shared/password-quality-util-passwdqc.c
+@@ -1,5 +1,6 @@
+ /* SPDX-License-Identifier: LGPL-2.1-or-later */
+ 
++#include "alloc-util.h"
+ #include "dlfcn-util.h"
+ #include "errno-util.h"
+ #include "log.h"

sdk_container/src/third_party/portage-stable/sys-apps/systemd/files/systemd-258-shared-add-missing-alloc-util.patch

@@ -0,0 +1,7 @@
+account include system-auth
+
+session required pam_selinux.so close
+session required pam_selinux.so nottys open
+session required pam_loginuid.so
+session include system-auth
+session optional pam_systemd.so